Data Security & Privacy FAQ

---

No. SchoolOps.ai never stores, copies, or persists any school data.
We process data securely in real time and discard all session-based information once your session ends. If your account is deactivated, we no longer retain any of your data.

We use enterprise-grade security to protect every action you take:

• Role-based access control to restrict data access to only authorized users.
• Data encryption in transit (SSL/TLS) and at rest, especially for sensitive data like credentials.
• Firewall protection and daily malware scanning to prevent unauthorized access.
• Regular data backups to mitigate risk of hardware failure or cyberattack.
• Penetration testing to proactively detect and patch vulnerabilities.
• Real-time-only LLM that accesses data only from authenticated sessions and never trains on school data.
• Detailed audit logging to track data access, changes, and system events.

Yes, fully. SchoolOps.ai complies with both FERPA and COPPA requirements:

• Parents and schools maintain control over student data.
• No targeted advertising or use of data for commercial purposes.
• Parental consent protocols are respected in alignment with COPPA for users under 13.
• District ownership of data is guaranteed in all DSA agreements.
  

We follow a continuous security improvement process, including:

• Frequent internal reviews of data access and use
• Third-party penetration testing
• Regular updates based on evolving state laws and national compliance frameworks (Access 4 Learning Community, Student Data Privacy Consortium)
  

We make the onboarding process seamless while respecting district IT/legal workflows:

• 📝 Auto-filled, FERPA/COPPA-aligned DSA agreements generated for your school or district, tailored to local policies.
• 🧭 Detection of existing partner districts and pre-clearance status, so you know instantly if your district already has approved access.
• 📩 Auto-forwarding options for IT and legal teams, complete with pre-built contextual documentation, helping them evaluate SchoolOps.ai efficiently and securely.
  

We maintain detailed system logs to ensure transparency and accountability:

• Access logs (who accessed what and when)
• Change logs (what was updated and by whom)
• Event logs (errors, alerts, or flagged activities)

These logs support internal audits and help schools comply with their own oversight requirements.

Only authenticated users within your district and our company can access information, and access is tightly governed by role-based permissions. No one outside your authorized school or district team can view or retrieve data.

Upon account deactivation, all data access is revoked and all session data is permanently deleted.
There is no lingering footprint or backup of user or student data, in full alignment with FERPA data minimization standards.

We’ve removed most of the legal and technical friction that slows edtech adoption:

• Download or auto-generate your customized DSA agreement
• Instantly identify if your district is already approved
• Forward demo and documentation to IT/legal for fast-track review

Want help? Our team is happy to walk your IT and legal department through the process.

Reach out anytime at info@schoolops.ai to connect with our data privacy team.